EAC Compliance with the Federal Information Security Modernization Act Fiscal Year 2020

Submitting OIG:

Election Assistance Commission OIG

Report Description:

Fiscal Year 2020 audit of EAC's compliance with the Federal Information Security Modernization Act (FISMA) of 2014

Short / Alternative Report Title:

EAC FY 2020 FISMA Audit

Date Issued:

Thursday, December 17, 2020

Agency Reviewed / Investigated:

Election Assistance Commission

Submitting OIG-Specific Report Number:

I-PA-EAC-02-20

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
EAC FY 20 FISMA Final Report I-PA-EAC-02-20_Web.pdf	958.77 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
EAC OIT should prepare an authorization package for its Microsoft Azure system that includes a security and privacy plan, security and privacy assessment report, plans of action and milestones, and an executive summary.
2	Open	No
EAC OIT should ensure Data Owners sign user access recertifications.
3	Open	No
EAC OIT should implement DMARC policy and HSTS security controls required by DHS Binding Operational Directive 18-01.
4	Open	No
EAC OIT should reconcile its physical inventory to its inventory system report and update inventory records for separated employees to reflect the EAC operating environment accurately.
5	Open	No
EAC OIT should prepare performance metrics that measure the effectiveness or efficiency of its information security program and security controls the EAC employs in support of its programs.

Election Assistance Commission OIG

Election Assistance Commission

The Office of Inspector General (OIG) is an independent division of the U.S. Election Assistance Commission (EAC). The OIG was created in 2005 and operates under the authorities vested in it by the Help America Vote Act (HAVA) and the Inspector General Act of 1978, as amended (IG Act). The mission of the OIG is to enhance the economy, efficiency, and effectiveness of EAC’s operations by: conducting audits, reviews, evaluations and assessments of EAC programs and operations; detecting and preventing fraud, waste, abuse and mismanagement of EAC programs; promoting better EAC management; preserving and protecting EAC employee and program integrity; and communicating with the Commission and Congress to keep them fully informed of the status of EAC administration and operations and the need for and progress of corrective actions.

https://www.eac.gov/inspector-general/

Search form

EAC Compliance with the Federal Information Security Modernization Act Fiscal Year 2020

Related Open Recommendations